Privacy Policy

We collect information in the following ways:

• Account information — name, email address, and password hash when you sign up.
• Merchant configuration — webhook URLs, payout address preferences, IP whitelist entries, and withdrawal threshold settings you configure.
• Transaction data — invoices, deposit addresses, withdrawal requests, settlements, and ledger entries generated through your use of the Service.
• Technical data — IP addresses, request headers, timestamps, and API usage logs, collected for security, rate limiting, and abuse prevention.
• Communications — messages you send us through contact, support, or careers channels.

We use the information we collect to:

• Operate, maintain, and secure the Service, including detecting deposits and processing withdrawals.
• Authenticate requests, enforce rate limits, and prevent fraud or abuse.
• Communicate with you about your account, transactions, and changes to our policies.
• Comply with legal, regulatory, and audit obligations.
• Improve the reliability and functionality of the Service based on aggregated usage patterns.

Blockchain networks are public by design. Deposit addresses, withdrawal destination addresses, transaction hashes, and amounts associated with your invoices and withdrawals are recorded on public, immutable ledgers that Payaries does not control and cannot alter or delete. This on-chain data is separate from, and not covered by, the deletion rights described below.

Our marketing website and dashboard may use strictly necessary cookies or local storage to maintain your session and remember basic preferences. We do not use these mechanisms for third-party advertising tracking.

We do not sell your personal information. We may share information with:

• Service providers who help us operate the platform (e.g., infrastructure hosting), under confidentiality obligations.
• Regulators or law enforcement, where required by applicable law or legal process.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply.

We apply technical and organizational safeguards appropriate to the sensitivity of the data we hold, including HMAC-signed API requests, scoped session and API-key permissions, and restricted internal access to secrets such as API keys and webhook signing secrets. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain account and transaction information for as long as your account is active and as needed to comply with legal, accounting, and audit obligations. Ledger and transaction records tied to financial activity may be retained longer than account profile data to satisfy recordkeeping requirements.

Depending on your jurisdiction, you may have the right to access, correct, export, or request deletion of your personal information, and to object to or restrict certain processing. Deletion requests cannot extend to information Payaries is required to retain for legal, regulatory, or audit purposes, nor to data already recorded on a public blockchain. To exercise these rights, contact us using the details below.

Information we collect may be processed in countries other than your own. Where required, we implement appropriate safeguards for such transfers consistent with applicable data protection law.

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

Questions about this Privacy Policy or requests regarding your personal information can be sent to privacy@payaries.com.